Extended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageCertSign
KeyUsageCRLSign
Static task
static1
Behavioral task
behavioral1
Sample
2024-06-01_3499f42e6690073ae30507eb45f7edc4_magniber.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-06-01_3499f42e6690073ae30507eb45f7edc4_magniber.exe
Resource
win10v2004-20240508-en
Target
2024-06-01_3499f42e6690073ae30507eb45f7edc4_magniber
Size
19.6MB
MD5
3499f42e6690073ae30507eb45f7edc4
SHA1
6d3f8552586de7513c308e043c9bace1234b85a0
SHA256
db899d94298ab313d59e2cb347ee4387f4d53d890a17b49d482d6b541223b542
SHA512
f2f91dddcfee14e0014fc7c2df336ec26d0f2e4ba4a7223e6f312d087f7446f9fb816c0a7d29710ed4485a46948718d6c2ea48d464166cf97afcc141f5818e08
SSDEEP
393216:m83jwvAVi+Q8kWFra5XwubfbdczRgwH0JFmNoJzC7:ms0AVE8kWFra+ubfiez5zc
resource | yara_rule |
---|---|
sample | INDICATOR_EXE_Packed_VMProtect |
ExtKeyUsageTimeStamping
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageClientAuth
ExtKeyUsageCodeSigning
KeyUsageCertSign
KeyUsageCRLSign
ExtKeyUsageTimeStamping
KeyUsageDigitalSignature
ExtKeyUsageCodeSigning
KeyUsageDigitalSignature
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
D:\BuildAgent\work\aa75b25f660b5db2\build.msvc\Win32\Client-Release\WindowsClient\RobloxPlayerBeta.pdb
IsNetworkAlive
UrlMkSetSessionOption
?getUserData@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAPAX@Z
?setBypass@DSP@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?release@DSP@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?setParameterFloat@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HM@Z
?getParameterFloat@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HPAMPADH@Z
FMOD_Memory_Initialize
FMOD_Memory_GetStats
FMOD_System_Create
?release@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?setOutput@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_OUTPUTTYPE@@@Z
?getNumDrivers@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?getDriverInfo@System@FMOD@@QAG?AW4FMOD_RESULT@@HPADHPAUFMOD_GUID@@PAHPAW4FMOD_SPEAKERMODE@@2@Z
?setDriver@System@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?getDriver@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?setSoftwareFormat@System@FMOD@@QAG?AW4FMOD_RESULT@@HW4FMOD_SPEAKERMODE@@H@Z
?getSoftwareFormat@System@FMOD@@QAG?AW4FMOD_RESULT@@PAHPAW4FMOD_SPEAKERMODE@@0@Z
?init@System@FMOD@@QAG?AW4FMOD_RESULT@@HIPAX@Z
?update@System@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?set3DSettings@System@FMOD@@QAG?AW4FMOD_RESULT@@MMM@Z
?set3DListenerAttributes@System@FMOD@@QAG?AW4FMOD_RESULT@@HPBUFMOD_VECTOR@@000@Z
?getVersion@System@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?setUserData@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAX@Z
?unlock@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAX0II@Z
?lock@Sound@FMOD@@QAG?AW4FMOD_RESULT@@IIPAPAX0PAI1@Z
?isRecording@System@FMOD@@QAG?AW4FMOD_RESULT@@HPA_N@Z
?recordStart@System@FMOD@@QAG?AW4FMOD_RESULT@@HPAVSound@2@_N@Z
?getRecordPosition@System@FMOD@@QAG?AW4FMOD_RESULT@@HPAI@Z
?getRecordDriverInfo@System@FMOD@@QAG?AW4FMOD_RESULT@@HPADHPAUFMOD_GUID@@PAHPAW4FMOD_SPEAKERMODE@@2PAI@Z
?getRecordNumDrivers@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH0@Z
?getMeteringInfo@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAUFMOD_DSP_METERING_INFO@@0@Z
?getMeteringEnabled@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PA_N0@Z
?setMeteringEnabled@DSP@FMOD@@QAG?AW4FMOD_RESULT@@_N0@Z
?setParameterData@DSP@FMOD@@QAG?AW4FMOD_RESULT@@HPAXI@Z
?disconnectFrom@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAV12@PAVDSPConnection@2@@Z
?addInput@DSP@FMOD@@QAG?AW4FMOD_RESULT@@PAV12@PAPAVDSPConnection@2@W4FMOD_DSPCONNECTION_TYPE@@@Z
?release@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?getCurrentSound@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSound@2@@Z
?setLoopCount@Channel@FMOD@@QAG?AW4FMOD_RESULT@@H@Z
?setChannelGroup@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAVChannelGroup@2@@Z
?getPosition@Channel@FMOD@@QAG?AW4FMOD_RESULT@@PAII@Z
?setPosition@Channel@FMOD@@QAG?AW4FMOD_RESULT@@II@Z
?setFrequency@Channel@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?set3DMinMaxDistance@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@MM@Z
?set3DAttributes@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_VECTOR@@00@Z
?getNumDSPs@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAH@Z
?removeDSP@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAVDSP@2@@Z
?getDSP@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@HPAPAVDSP@2@@Z
?getMode@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAI@Z
?setMode@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@I@Z
?getPaused@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?setPaused@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?stop@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?getOpenState@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAW4FMOD_OPENSTATE@@PAIPA_N2@Z
?getLength@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAII@Z
?getDefaults@Sound@FMOD@@QAG?AW4FMOD_RESULT@@PAMPAH@Z
?release@Sound@FMOD@@QAG?AW4FMOD_RESULT@@XZ
?playSound@System@FMOD@@QAG?AW4FMOD_RESULT@@PAVSound@2@PAVChannelGroup@2@_NPAPAVChannel@2@@Z
?createSound@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDIPAUFMOD_CREATESOUNDEXINFO@@PAPAVSound@2@@Z
FMOD_Sound_GetUserData
FMOD_Sound_Release
?setChannelFormat@DSP@FMOD@@QAG?AW4FMOD_RESULT@@IHW4FMOD_SPEAKERMODE@@@Z
?addGroup@ChannelGroup@FMOD@@QAG?AW4FMOD_RESULT@@PAV12@_NPAPAVDSPConnection@2@@Z
?addDSP@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@HPAVDSP@2@@Z
?getMute@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PA_N@Z
?setMute@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@_N@Z
?getVolume@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAM@Z
?setVolume@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@M@Z
?getSystemObject@ChannelControl@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVSystem@2@@Z
?setReverbProperties@System@FMOD@@QAG?AW4FMOD_RESULT@@HPBUFMOD_REVERB_PROPERTIES@@@Z
?getMasterChannelGroup@System@FMOD@@QAG?AW4FMOD_RESULT@@PAPAVChannelGroup@2@@Z
?createChannelGroup@System@FMOD@@QAG?AW4FMOD_RESULT@@PBDPAPAVChannelGroup@2@@Z
?createDSPByType@System@FMOD@@QAG?AW4FMOD_RESULT@@W4FMOD_DSP_TYPE@@PAPAVDSP@2@@Z
?createDSP@System@FMOD@@QAG?AW4FMOD_RESULT@@PBUFMOD_DSP_DESCRIPTION@@PAPAVDSP@2@@Z
?getCPUUsage@System@FMOD@@QAG?AW4FMOD_RESULT@@PAM0000@Z
?getChannelsPlaying@System@FMOD@@QAG?AW4FMOD_RESULT@@PAH0@Z
GetVersionExA
GetGeoInfoA
GetUserGeoID
GetSystemTimeAsFileTime
GetTickCount
LocalAlloc
LocalFree
FileTimeToSystemTime
lstrcpynW
lstrcpyW
InterlockedExchange
VirtualAlloc
VirtualFree
GetCurrentProcess
CreateThread
GetCurrentThread
SetThreadPriority
GetThreadPriority
SetErrorMode
InitializeCriticalSection
ReleaseSemaphore
DuplicateHandle
GetSystemInfo
lstrcmpiA
lstrlenW
CreateSemaphoreA
GetACP
GetLocalTime
SizeofResource
FindResourceW
FindResourceExW
MoveFileA
WriteProcessMemory
WriteFile
CompareFileTime
CreateFileA
LoadLibraryExA
IsDBCSLeadByte
DecodePointer
GetShortPathNameW
IsWow64Process
ReplaceFileW
GetModuleHandleExA
SearchPathW
OpenEventW
CreateFileMappingW
WriteProfileStringW
VerSetConditionMask
TryEnterCriticalSection
GetFileSizeEx
GetStdHandle
ReadFile
SetFilePointer
SetFilePointerEx
FormatMessageW
TlsAlloc
TlsGetValue
TlsSetValue
CreateSemaphoreW
LoadLibraryW
GetModuleHandleW
GetEnvironmentVariableA
SetEnvironmentVariableA
OutputDebugStringW
CreateFileW
QueryPerformanceCounter
QueryPerformanceFrequency
AttachConsole
WriteConsoleW
VirtualQuery
GetThreadContext
SetThreadContext
ResumeThread
FindFirstChangeNotificationA
GlobalMemoryStatusEx
GetVersion
FormatMessageA
SleepEx
ExpandEnvironmentStringsA
VerifyVersionInfoA
OpenProcess
IsDebuggerPresent
TlsFree
GetLastError
SetWaitableTimer
GetLogicalProcessorInformation
DeviceIoControl
SetEndOfFile
FindClose
GetFileTime
SetFileTime
GetTempPathW
GetCurrentDirectoryW
GetCurrentThreadId
RaiseException
GetProcessHeap
HeapSize
GetTempPathA
HeapReAlloc
HeapAlloc
HeapDestroy
GlobalFree
FindNextFileA
GlobalHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExA
SetStdHandle
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
GetConsoleCP
WaitForMultipleObjectsEx
GetConsoleMode
GetTimeZoneInformation
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
GetDriveTypeW
ExitProcess
GetModuleHandleExW
ExitThread
SetConsoleCtrlHandler
RtlUnwind
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
GetVersionExW
LoadLibraryExW
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProfileStringA
OutputDebugStringA
GetModuleHandleA
GetModuleFileNameW
LoadLibraryA
CreateFileMappingA
CreateMutexA
UnmapViewOfFile
MapViewOfFile
SystemTimeToFileTime
GetSystemTime
Sleep
WaitForMultipleObjects
WaitForSingleObject
ReleaseMutex
VirtualProtect
GetProcAddress
FreeLibrary
WideCharToMultiByte
MultiByteToWideChar
FindResourceA
GetModuleFileNameA
lstrcmpA
MulDiv
LoadResource
DeleteCriticalSection
GlobalLock
GlobalAlloc
LockResource
InterlockedDecrement
InterlockedIncrement
ResetEvent
SetEvent
GetCurrentProcessId
WaitForSingleObjectEx
CloseHandle
OpenEventA
CreateEventA
LeaveCriticalSection
EnterCriticalSection
GetDiskFreeSpaceExW
CreateDirectoryW
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
TerminateProcess
GetStartupInfoW
UnhandledExceptionFilter
GetStringTypeW
LCMapStringW
CompareStringW
CreateEventW
GetCPInfo
GetNativeSystemInfo
RemoveDirectoryW
GetFullPathNameW
GetFileAttributesW
DeleteFileW
FindFirstFileW
FindFirstFileA
DeleteFileA
GlobalUnlock
SetCurrentDirectoryW
FindNextFileW
CopyFileW
MoveFileExW
SetUnhandledExceptionFilter
CreateProcessA
FreeConsole
GetProcessAffinityMask
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
InitializeCriticalSectionAndSpinCount
HeapFree
SetLastError
GetLocaleInfoW
CreateWaitableTimerA
ReadConsoleW
LoadLibraryA
GetProcAddress
GetLastError
FreeLibrary
InitializeCriticalSection
GetModuleFileNameW
GetModuleHandleW
TerminateProcess
GetCurrentProcess
DeleteCriticalSection
LoadLibraryW
CreateEventW
CompareStringW
SetLastError
GetModuleHandleA
VirtualProtect
GetTickCount
EnterCriticalSection
LeaveCriticalSection
VirtualFree
VirtualAlloc
WriteProcessMemory
CreateToolhelp32Snapshot
GetCurrentProcessId
GetCurrentThreadId
Thread32First
OpenThread
Thread32Next
CloseHandle
SuspendThread
ResumeThread
GetSystemInfo
LoadResource
MultiByteToWideChar
WideCharToMultiByte
FindResourceExW
FindResourceExA
GetThreadLocale
GetUserDefaultLCID
GetSystemDefaultLCID
EnumResourceNamesA
EnumResourceNamesW
EnumResourceLanguagesA
EnumResourceLanguagesW
EnumResourceTypesA
EnumResourceTypesW
HeapAlloc
HeapFree
HeapDestroy
HeapCreate
GetSystemTime
GetLocalTime
SystemTimeToFileTime
CompareFileTime
GetCommandLineA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
GetModuleFileNameA
RaiseException
Sleep
ExitProcess
SetHandleCount
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetSystemTimeAsFileTime
HeapReAlloc
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
RtlUnwind
HeapSize
SetFilePointer
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
FlushFileBuffers
VirtualQuery
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
SetWindowPos
DialogBoxIndirectParamA
GetDlgItem
CharNextA
SetFocus
GetFocus
SetCapture
ReleaseCapture
CreateAcceleratorTableA
DestroyAcceleratorTable
GetDC
ReleaseDC
BeginPaint
EndPaint
InvalidateRect
InvalidateRgn
RedrawWindow
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
GetClientRect
ClientToScreen
ScreenToClient
GetSysColor
FillRect
GetWindowLongA
SetWindowLongA
GetDesktopWindow
GetParent
GetClassNameA
GetWindow
LoadCursorA
PostMessageA
DefWindowProcW
ShowWindowAsync
CreateDialogIndirectParamA
MessageBoxA
LoadStringA
MonitorFromWindow
GetMonitorInfoA
MoveWindow
ShowWindow
GetWindowPlacement
EnumDisplayDevicesA
GetWindowInfo
EnumWindows
UnregisterDeviceNotification
RegisterDeviceNotificationW
LoadCursorW
GetClassInfoExW
PostMessageW
SendMessageW
PeekMessageW
UnregisterClassW
GetSystemMetrics
GetWindowRect
MapWindowPoints
SetRectEmpty
GetWindowThreadProcessId
LoadStringW
LoadKeyboardLayoutA
OpenClipboard
CloseClipboard
GetClipboardData
MapVirtualKeyA
MapVirtualKeyExA
SetCursor
GetCursorPos
ClipCursor
SetRect
GetRawInputData
RegisterRawInputDevices
GetMessageW
TranslateMessage
DispatchMessageW
PostQuitMessage
RegisterClassExW
CreateWindowExW
SetTimer
UpdateWindow
LoadIconW
EndDialog
SetWindowContextHelpId
LoadIconA
MapDialogRect
FindWindowA
SetWindowPlacement
UnregisterClassA
GetClassInfoExA
CallWindowProcA
DefWindowProcA
SendMessageA
RegisterWindowMessageA
CreateWindowExA
IsWindow
IsChild
GetAsyncKeyState
DestroyWindow
EnumDisplaySettingsExA
ChangeDisplaySettingsExA
RegisterClassExA
MessageBoxW
CharUpperBuffW
SwapBuffers
ChoosePixelFormat
GetDIBits
GetObjectA
SelectObject
GetStockObject
GetDeviceCaps
DeleteObject
DeleteDC
CreateSolidBrush
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SetPixelFormat
RegEnumKeyExA
CryptImportKey
CryptGenRandom
CryptDestroyKey
CryptDestroyHash
CryptHashData
CryptCreateHash
RegQueryInfoKeyW
RegDeleteValueA
RegCreateKeyExA
RegSetValueExA
CryptVerifySignatureA
RegDeleteKeyA
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
ShellExecuteA
ShellExecuteW
SHGetFolderPathAndSubDirW
SHGetFolderPathW
CoCreateGuid
CoUninitialize
CoInitializeEx
CoGetClassObject
CoCreateInstance
CLSIDFromString
CLSIDFromProgID
StringFromGUID2
CoTaskMemFree
OleInitialize
OleUninitialize
OleLockRunning
CreateStreamOnHGlobal
CoInitialize
CoFreeUnusedLibraries
CoTaskMemRealloc
CoTaskMemAlloc
GetErrorInfo
SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen
VarUI4FromStr
OleCreateFontIndirect
LoadRegTypeLi
LoadTypeLi
VariantClear
VariantInit
PathRemoveFileSpecA
StrCmpW
PathAppendA
PathFileExistsA
PathStripPathA
PathAddBackslashA
MiniDumpWriteDump
VerQueryValueA
GetFileVersionInfoW
GetFileVersionInfoSizeW
CryptMsgClose
CryptMsgGetParam
CertCloseStore
CertFindCertificateInStore
CertFreeCertificateContext
CertGetNameStringA
CryptDecodeObject
CryptQueryObject
WinVerifyTrust
IcmpCreateFile
GetAdaptersAddresses
IcmpSendEcho
InternetSetCookieA
GetModuleBaseNameA
GetProcessMemoryInfo
GetModuleInformation
timeGetTime
timeSetEvent
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
CallNtPowerInformation
recvfrom
getnameinfo
__WSAFDIsSet
gethostbyname
WSAStartup
WSACleanup
closesocket
connect
htons
send
sendto
socket
WSAGetLastError
getaddrinfo
freeaddrinfo
htonl
bind
ioctlsocket
getpeername
getsockname
getsockopt
ntohs
recv
select
setsockopt
gethostname
WSASetLastError
WSAIoctl
inet_addr
inet_ntoa
glTexParameterf
glTexParameteri
glTexSubImage2D
glReadPixels
wglGetProcAddress
wglCreateContext
wglDeleteContext
glPixelStorei
glGetTexImage
glGenTextures
glDeleteTextures
glDrawElements
glDrawArrays
wglGetCurrentContext
wglMakeCurrent
glTexImage2D
glClearDepth
glGetIntegerv
glGetString
glBindTexture
glBlendFunc
glClear
glClearColor
glViewport
glClearStencil
glColorMask
glCopyTexSubImage2D
glCullFace
glDepthFunc
glDepthMask
glDisable
glEnable
glPolygonOffset
glReadBuffer
glStencilFunc
glStencilMask
glStencilOp
wglGetCurrentDC
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsA
SetupDiGetDeviceInterfaceDetailA
SetupDiDestroyDeviceInfoList
AmdPowerXpressRequestHighPerformance
NvOptimusEnablement
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ